You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Run publish jobs on ubuntu-latest for npm provenance (#1344)
npm trusted publishing with --provenance rejects Blacksmith runners: the
sigstore bundle records the runner environment as self-hosted and npm only
accepts github-hosted. This is the same failure #1291 fixed; #1292 reverted
it on the theory the culprit was a trusted-publisher filename mismatch, but
the 1.5.29 publish failed with the runner-environment error again. Only the
two publish jobs move; CI stays on Blacksmith.
ci: run release + CLI publish jobs on ubuntu-latest (#1291)
The Blacksmith runner migration (#1286) broke npm trusted publishing:
Blacksmith runners mint OIDC tokens from a different issuer than GitHub
Actions, so npm rejects the provenance publish with a 404. Move only the
two publish jobs back to GitHub-hosted runners so the OIDC issuer matches
the configured trusted publishers; the rest of the Blacksmith migration
is unaffected.